$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8440a229-96f8-4a89-b068-a25fe646532e.roa File: 8440a229-96f8-4a89-b068-a25fe646532e.roa (raw, json) Hash identifier: tXL6q2zaNM22Ti84462X3zIuUi7u1F93WeF9ANENvgY= Subject key identifier: 49:24:A3:74:BA:02:23:08:42:B0:A0:37:73:70:96:B5:20:D1:77:6D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 18755F515C7CCDB00AE8EFFD00229FFE39595A9F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8440a229-96f8-4a89-b068-a25fe646532e.roa Signing time: Sat 31 May 2025 00:00:13 +0000 ROA not before: Sat 31 May 2025 00:00:13 +0000 ROA not after: Sat 05 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab8:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:75:5f:51:5c:7c:cd:b0:0a:e8:ef:fd:00:22:9f:fe:39:59:5a:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 31 00:00:13 2025 GMT Not After : Jul 5 23:59:59 2025 GMT Subject: serialNumber=e6e9a9ca811abb20ef9acf4160104933bf10ce5f358818dbc64c4c5f74eb64b1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:25:1b:14:8a:b1:81:28:16:ad:72:55:5f:9c: 19:6c:aa:68:dd:d8:ab:6f:3d:d1:db:f3:05:cd:f9: d2:f6:70:89:ec:27:f5:8f:e4:b4:6f:19:bc:06:27: 1d:9b:b8:e6:02:45:b9:86:77:4d:55:37:5c:ac:59: 8b:66:a1:79:43:67:ee:35:7e:92:43:22:91:87:9d: a1:18:2c:f9:7e:01:0d:4c:b3:10:60:87:2e:20:fb: 91:41:b8:40:06:d3:cb:6d:8d:f5:12:7d:d4:6c:5a: 64:11:cf:a9:c3:77:65:07:b8:c5:e0:1f:54:f7:f0: 04:87:6b:b8:58:ed:cc:4e:ad:27:b5:9c:69:d0:3f: d0:91:85:86:d9:ba:ee:ff:2d:f1:9a:3b:7f:0e:e0: 0e:b4:dd:bc:1c:02:22:b9:36:47:e4:af:02:f7:b8: 97:5e:8c:31:38:9b:fc:37:f8:0a:5c:99:09:8d:a0: aa:6d:77:88:46:eb:26:be:0a:25:93:75:e0:ca:7c: 12:c6:6d:5d:23:73:bb:6b:3f:3b:be:6c:42:f7:48: 2e:46:79:db:bf:c9:ba:15:bc:22:e9:1e:3f:ca:94: d0:73:87:3c:26:71:86:a9:65:3d:1c:33:18:1a:82: 2a:d6:93:f7:96:df:95:87:ad:87:0d:dc:52:7c:08: c3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:24:A3:74:BA:02:23:08:42:B0:A0:37:73:70:96:B5:20:D1:77:6D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8440a229-96f8-4a89-b068-a25fe646532e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab8:b000::/40 Signature Algorithm: sha256WithRSAEncryption 63:e9:61:ab:d2:74:b0:0d:46:5a:67:16:f6:c3:9d:81:c0:fb: 21:1f:19:2e:3f:ee:27:b7:26:8e:ee:f7:84:2a:92:13:c7:ef: d0:a9:39:5b:5b:e7:d6:02:66:ac:fd:28:80:b0:ff:99:91:61: 19:a3:44:f0:5a:2c:ee:be:bb:5f:1d:53:6a:fb:84:63:2a:85: 7c:8a:b9:95:77:26:c7:cb:aa:42:76:91:87:7d:fe:0a:39:5b: c4:79:1b:f8:60:05:13:c1:09:d1:4b:50:c1:b8:cb:dd:ab:2b: 64:fa:2f:24:ad:de:66:89:8d:b2:fe:13:bd:6d:fd:f2:1a:4d: 4d:4e:37:af:68:c7:94:82:dc:2a:cf:3b:d7:c7:4b:4d:ca:08: 32:af:dc:50:48:46:a5:ec:e5:68:a3:ae:64:ce:ea:c9:ae:bf: 57:f1:de:34:6e:d2:22:d8:d2:04:06:6c:64:8b:66:78:12:77: d1:ea:f7:cc:38:90:ad:83:a1:33:f2:1c:53:f6:d9:f6:f0:93: a3:91:72:96:99:3a:12:f8:79:bc:07:0c:2f:c7:a7:eb:c9:fa: 36:f3:f2:9d:de:c1:42:80:b5:51:d2:56:b5:d1:20:9e:c2:cb: 4b:d9:64:74:3c:ce:2f:d1:7f:8c:9c:94:f0:3f:f3:f9:45:1b: 32:bd:ca:b4 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUGHVfUVx8zbAK6O/9ACKf/jlZWp8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUzMTAwMDAxM1oX DTI1MDcwNTIzNTk1OVowejFJMEcGA1UEBRNAZTZlOWE5Y2E4MTFhYmIyMGVmOWFj ZjQxNjAxMDQ5MzNiZjEwY2U1ZjM1ODgxOGRiYzY0YzRjNWY3NGViNjRiMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SUbFIqxgSgWrXJVX5wZbKpo3dir bz3R2/MFzfnS9nCJ7Cf1j+S0bxm8Bicdm7jmAkW5hndNVTdcrFmLZqF5Q2fuNX6S QyKRh52hGCz5fgENTLMQYIcuIPuRQbhABtPLbY31En3UbFpkEc+pw3dlB7jF4B9U 9/AEh2u4WO3MTq0ntZxp0D/QkYWG2bru/y3xmjt/DuAOtN28HAIiuTZH5K8C97iX XowxOJv8N/gKXJkJjaCqbXeIRusmvgolk3XgynwSxm1dI3O7az87vmxC90guRnnb v8m6Fbwi6R4/ypTQc4c8JnGGqWU9HDMYGoIq1pP3lt+Vh62HDdxSfAjD6wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEkko3S6AiMIQrCgN3NwlrUg0XdtMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg0NDBhMjI5LTk2ZjgtNGE4OS1iMDY4LWEyNWZlNjQ2NTMyZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauLAwDQYJKoZIhvcNAQELBQADggEBAGPpYavSdLANRlpnFvbD nYHA+yEfGS4/7ie3Jo7u94QqkhPH79CpOVtb59YCZqz9KICw/5mRYRmjRPBaLO6+ u18dU2r7hGMqhXyKuZV3JsfLqkJ2kYd9/go5W8R5G/hgBRPBCdFLUMG4y92rK2T6 LySt3maJjbL+E71t/fIaTU1ON69ox5SC3CrPO9fHS03KCDKv3FBIRqXs5WijrmTO 6smuv1fx3jRu0iLY0gQGbGSLZngSd9Hq98w4kK2DoTPyHFP22fbwk6ORcpaZOhL4 ebwHDC/Hp+vJ+jbz8p3ewUKAtVHSVrXRIJ7Cy0vZZHQ8zi/Rf4yclPA/8/lFGzK9 yrQ= -----END CERTIFICATE-----Generated at Tue Jun 3 23:14:46 2025 by rpki-client